Lucene search
+L

25641 matches found

osv_cve
osv_cve
•added 2024/02/20 3:15 a.m.•24 views

CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

8.1CVSS7.8AI score0.00889EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/20 3:15 a.m.•34 views

Format string

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

5.1CVSS8.1AI score0.00889EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/02/20 2:15 a.m.•26 views

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

6.5CVSS5.8AI score0.00649EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/20 2:15 a.m.•44 views

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

6.5CVSS5.4AI score0.00649EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/20 2:14 a.m.•104 views

CVE-2023-6764

CVE-2023-6764 is a format-string vulnerability in Zyxel devices’ IPSec VPN functionality. Affected products and versions include Zyxel ATP series firmware 4.32–5.37 Patch 1, USG FLEX series 4.50–5.37 Patch 1, USG FLEX 50(W) 4.16–5.37 Patch 1, and USG20(W)-VPN 4.16–5.37 Patch 1. An attacker could ...

8.1CVSS7.8AI score0.00889EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/20 2:14 a.m.•48 views

CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

8.1CVSS8.5AI score0.00889EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/20 2:14 a.m.•28 views

CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

8.1CVSS7.8AI score0.00889EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/20 1:42 a.m.•44 views

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

5.7CVSS5.8AI score0.00649EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/20 1:42 a.m.•64 views

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

5.7CVSS5.7AI score0.00649EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/20 1:42 a.m.•100 views

CVE-2023-6399

CVE-2023-6399 is a format-string vulnerability in Zyxel devices (ATP series 4.32–5.37 Patch 1; USG FLEX 4.50–5.37 Patch 1; USG FLEX 50(W) 4.16–5.37 Patch 1; USG20(W)-VPN 4.16–5.37 Patch 1; USG FLEX H 1.10–1.10 Patch 1) that affects the Device Insight feature. The root cause is uncontrolled format...

6.5CVSS5.8AI score0.00649EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/02/20 12:00 a.m.•24 views

Zyxel ATP Formatting String Error Vulnerability

Zyxel ATP is a firewall from China-based Zyxel. A formatting string error vulnerability exists in Zyxel ATP firmware versions 4.32 through 5.37 Patch 1, which originates from allowing authenticated IPSec VPN users to cause a denial of service to the deviceid daemon by sending a crafted hostname t...

6.5CVSS5.9AI score0.00649EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/20 12:00 a.m.•11 views

CVE-2023-6764: Use of Externally-Controlled Format String

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

8.1CVSS7.8AI score0.00889EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/20 12:00 a.m.•28 views

Zyxel ATP Formatting String Error Vulnerability

Zyxel ATP is a firewall from China Heqin Zyxel. A format string error vulnerability exists in Zyxel ATP versions 4.32 through 5.37 Patch 1, which stems from a format string vulnerability in the IPSec VPN feature...

8.1CVSS7.4AI score0.00889EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/20 12:00 a.m.•13 views

CVE-2023-6399: Use of Externally-Controlled Format String

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

6.5CVSS5.8AI score0.00649EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2024/02/19 1:15 p.m.•16 views

UBUNTU-CVE-2024-1597

pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a strin...

10CVSS7.6AI score0.0481EPSS
SaveExploits0References9
Fedora
Fedora
•added 2024/02/18 12:55 a.m.•34 views

[SECURITY] Fedora 39 Update: qt5-qtbase-5.15.12-5.fc39

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

6.2CVSS6.8AI score0.00321EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/02/18 12:00 a.m.•26 views

Fedora: Security Advisory (FEDORA-2024-d9be3edddb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.2CVSS7AI score0.00321EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/02/15 2:15 p.m.•19 views

CVE-2024-23113

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3,...

9.8CVSS8.8AI score0.61725EPSS
SaveExploits8References2
NVD
NVD
•added 2024/02/15 2:15 p.m.•49 views

CVE-2024-23113

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3,...

9.8CVSS9.6AI score0.61725EPSS
SaveExploits8References2
Vulnrichment
Vulnrichment
•added 2024/02/15 1:59 p.m.•60 views

CVE-2024-23113

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3,...

9.8CVSS8.8AI score0.61725EPSS
SaveExploits8References1
Rows per page
Query Builder